Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F0D4E48B3F611F0B5B7ABF6DAE4EC9C.roa
File: 1F0D4E48B3F611F0B5B7ABF6DAE4EC9C.roa (raw, json)
Hash identifier: r+YotIv39LRpU1wNBbw23dIPppN91mZJbrq8ijouH5k=
Subject key identifier: EB:E0:BE:B1:11:DA:48:09:3A:11:2D:A0:EB:2D:17:17:F7:D1:50:AA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C7A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F0D4E48B3F611F0B5B7ABF6DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 12:03:32 +0000
ROA not before: Tue 28 Oct 2025 12:03:27 +0000
ROA not after: Thu 28 Oct 2027 12:03:27 +0000
asID: 9304
IP address blocks: 154.16.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7290 (0x1c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 28 12:03:27 2025 GMT
Not After : Oct 28 12:03:27 2027 GMT
Subject: CN=6900b113-c260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:a3:0a:87:55:ca:7c:23:45:39:c6:62:0d:
71:61:9a:68:76:f7:57:b6:e0:39:95:a4:ab:ca:bb:
2e:82:e5:40:59:02:20:58:a6:dd:ea:00:f5:3d:59:
46:5d:44:9b:db:29:a4:b5:65:cf:82:c4:bf:1a:2c:
03:59:cd:2c:f4:e7:48:cf:e6:f0:17:d3:2b:43:a3:
9c:2a:94:8b:86:e4:f7:5f:91:79:a3:77:5c:98:72:
1c:80:c2:1b:1a:05:a3:d1:ca:06:31:d8:10:9e:a8:
8f:84:b2:a0:ce:ce:75:a0:95:38:3c:ef:92:0e:db:
7d:14:a6:5c:a7:1c:d5:1d:4c:aa:ae:e7:69:ac:a8:
26:0f:24:64:04:fa:da:8a:e2:9c:12:4e:4d:01:0c:
48:df:66:5f:0f:a4:7a:73:91:cd:38:ff:4f:05:4f:
25:1a:e5:e2:b7:c0:98:93:60:1c:af:e5:a6:5e:ae:
8e:07:7d:1e:60:3d:55:6b:af:3e:45:0c:4b:5e:2a:
06:64:98:0d:01:94:a9:3c:f1:bd:99:a3:29:2c:fe:
dc:f1:e5:3b:78:46:fc:cf:07:3a:4c:c5:6e:f7:b4:
3b:af:0e:54:0c:4f:36:11:19:05:98:ca:a3:77:9d:
43:00:05:29:1c:77:2e:43:44:64:35:fe:d5:e8:af:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:BE:B1:11:DA:48:09:3A:11:2D:A0:EB:2D:17:17:F7:D1:50:AA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1F0D4E48B3F611F0B5B7ABF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.2.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a0:6c:cb:60:74:5e:2a:07:9a:0f:95:09:48:c1:ee:75:5e:
d4:7d:84:34:8c:76:ee:15:ac:d7:e8:45:e7:ed:87:68:b5:68:
12:5e:9b:08:9e:98:ea:9e:5e:5d:7a:46:29:f0:a1:e8:09:3c:
7a:fa:7d:fd:99:38:d8:3e:42:3f:d1:b0:73:26:2f:d1:69:14:
ed:43:b6:b7:ec:d1:ec:09:14:09:b4:9b:c0:80:08:5a:58:60:
e5:5a:52:f4:6a:9a:ca:6b:aa:ce:ce:9a:fa:57:51:b8:b4:9b:
cf:e1:e9:a1:c6:77:ee:23:70:7f:01:c0:1d:6d:1b:19:ba:23:
d7:6e:7d:cb:10:e9:c9:ab:13:0b:12:8b:8f:d8:98:ba:90:96:
61:5e:e7:c0:54:4d:ca:71:45:50:bc:70:c5:52:86:7e:c5:c5:
22:57:3f:6e:22:48:81:4f:52:a4:32:61:66:c2:b2:a3:92:2d:
b2:ec:42:6c:35:47:7b:aa:43:83:e2:b1:36:62:c1:77:1d:be:
75:30:64:ec:b6:c7:e5:30:31:d3:35:05:ce:16:4f:23:3f:f7:
bb:17:95:d8:73:3c:ff:63:85:54:58:90:31:ac:0f:04:cb:05:
d5:33:01:ae:e0:6b:8f:fa:9e:8c:e3:ac:a1:1d:11:9e:cf:27:
33:c9:ae:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:01:39 2025 by rpki-client